sm8450-common: sepolicy: Reduce mi_thermald permissions in sysfs

Change-Id: I0d16f1a1ed73c5089d9dc116e24b61d58da47b7a

sepolicy/vendor/mi_thermald.te

@@ -3,10 +3,10 @@ type mi_thermald_exec, exec_type, vendor_file_type, file_type;
 
 init_daemon_domain(mi_thermald)
 
+allow mi_thermald sysfs:dir { read open };
 allow mi_thermald sysfs_devices_system_cpu:file rw_file_perms;
 allow mi_thermald self:capability { fsetid sys_boot };
 allow mi_thermald sysfs_thermal:file w_file_perms;
-allow mi_thermald sysfs:file w_file_perms;
 allow mi_thermald vendor_sysfs_kgsl:dir r_dir_perms;
 allow mi_thermald vendor_sysfs_kgsl:file rw_file_perms;
 allow mi_thermald vendor_sysfs_kgsl:lnk_file r_file_perms;